News for hackers. Stuff that matters.

A comment on Two Weeks of Rust. Parent comment

Re:Two Weeks of Rust by mcguire on Tuesday January 12, 2016 @01:10PM (#10889132)
Reproducibility is the thing that bothers me most about auto-downloading build systems. On the other hand, Cargo (IIRC) doesn't do what Maven does: if you say you want version X, you get version X or anything newer (unless you jump through hoops that I've never seen anyone jump through).

[Security just scares the piss out of me in general; downloading binaries is probably the smallest problem.]

[ Parent | on HN ]
Re:Two Weeks of Rust by burntsushi on Tuesday January 12, 2016 @01:38PM (#10889342)
Cargo follows semver by default. Specifying version "1" means "1.x.x, <2".

Pinning versions is simple. e.g., "=1.2.3".

You can read more about it here: http://doc.crates.io/crates-io.html

[ Parent | on HN ]
Re:Two Weeks of Rust by steveklabnik on Tuesday January 12, 2016 @01:54PM (#10889491)
And even when you have a range, Cargo.lock means that you get reproducable (in this sense) automatically.
[ Parent | on HN ]